Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/f815609f132a79aa40f089f41a381a0edeac84ba.roa
File:                     f815609f132a79aa40f089f41a381a0edeac84ba.roa (raw, json)
Hash identifier:          V74PTHMVgN5tcMrxgMxSGe04oFDlVN1kah4yenCdric=
Subject key identifier:   98:C6:3B:5E:04:C2:56:8A:A9:F4:EE:5D:D2:34:5A:11:F1:FB:D7:7D
Certificate issuer:       /CN=8b9a11aeaeba482db300e5c15088db3c41615181
Certificate serial:       0B0312
Authority key identifier: D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/f815609f132a79aa40f089f41a381a0edeac84ba.roa
Signing time:             Wed 24 Jan 2024 17:54:38 +0000
ROA not before:           Wed 24 Jan 2024 17:54:38 +0000
ROA not after:            Sat 24 Jan 2026 17:54:38 +0000
asID:                     272859
IP address blocks:        2803:6290::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 721682 (0xb0312)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9a11aeaeba482db300e5c15088db3c41615181
        Validity
            Not Before: Jan 24 17:54:38 2024 GMT
            Not After : Jan 24 17:54:38 2026 GMT
        Subject: CN=f815609f132a79aa40f089f41a381a0edeac84ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:95:e8:de:73:69:87:b0:0a:f6:c0:08:74:62:
                    fd:87:48:6d:2c:ed:57:49:c9:ae:e8:ad:38:6e:c7:
                    8b:53:e4:9a:63:c7:de:b7:64:b3:03:d3:74:5f:07:
                    f8:80:9f:90:ac:7d:83:60:c1:e1:5f:76:ee:b2:bc:
                    09:cf:22:92:b0:35:c6:b8:f2:9c:44:aa:67:ce:88:
                    ea:1e:81:41:84:d0:76:be:03:5c:85:2e:97:7c:82:
                    36:aa:8d:03:dc:ca:6f:34:14:cc:fb:51:5c:73:4c:
                    b8:56:90:48:61:7f:99:5f:7b:d7:1d:cc:22:a8:0a:
                    bb:7c:40:04:d1:2f:44:a4:a9:ab:f8:20:9a:65:dc:
                    1a:c3:7d:2c:95:9b:73:df:5c:82:2c:2f:b7:78:57:
                    a8:47:d9:b6:27:7e:13:98:93:f2:94:7d:af:2a:22:
                    ed:f4:7f:9e:79:b5:c3:38:1f:cd:10:bd:9c:c9:c9:
                    86:5d:4b:e1:83:f2:fd:f1:81:57:34:64:cd:71:26:
                    39:03:d3:20:6b:02:b5:cb:39:09:e9:a8:d4:72:11:
                    99:34:d0:89:14:fe:ff:75:bf:d1:a4:81:9a:b7:3c:
                    d0:32:b0:d2:3f:00:ad:e9:2d:20:3e:03:04:45:77:
                    ea:e1:e0:01:79:81:10:df:62:32:58:f9:94:1d:4b:
                    42:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C6:3B:5E:04:C2:56:8A:A9:F4:EE:5D:D2:34:5A:11:F1:FB:D7:7D
            X509v3 Authority Key Identifier:
                keyid:D0:2D:22:55:35:1F:15:DC:12:7B:79:8B:4D:D1:63:7D:FD:20:5D:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8b9a11aeaeba482db300e5c15088db3c41615181.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/f815609f132a79aa40f089f41a381a0edeac84ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/93b59802-6fe2-4724-8e73-d9673fb61bc0/8b9a11aeaeba482db300e5c15088db3c41615181.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6290::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:8c:19:ef:a3:90:37:10:6d:f0:73:e2:24:0d:08:27:3b:ca:
         bc:c7:7e:17:cb:23:bb:31:31:09:d6:3f:6d:4b:6a:7b:42:65:
         fb:31:e8:b8:a8:88:33:23:d1:dd:4a:e0:e0:6e:45:f0:f0:1c:
         65:24:ab:89:f8:75:ce:d6:90:5b:65:72:bb:91:e0:f6:ed:75:
         db:4d:31:73:9b:bc:1d:41:b8:6d:81:8c:2d:73:0e:85:93:ef:
         c7:47:0a:70:d5:09:f6:fe:27:0a:84:f2:4b:b0:be:83:1c:e6:
         f6:6c:cf:90:6a:26:7b:1a:68:f2:40:b0:af:a4:3c:28:37:50:
         b4:2f:8e:f3:92:c7:5d:46:c8:90:ad:69:78:f0:0c:26:28:51:
         83:de:7d:80:a4:f2:71:0a:f6:22:0d:df:ae:a3:dc:d9:ef:12:
         37:f0:02:2f:db:75:ab:35:ff:84:50:df:62:e2:84:a7:c6:8a:
         e8:3d:65:85:fe:c7:fb:c2:95:c7:2f:39:6b:3d:a9:9d:7a:2c:
         bd:71:0e:8c:24:b5:84:be:c0:27:3f:36:96:74:21:8a:8e:a5:
         de:8b:e7:4c:23:3f:2b:d6:33:a8:d6:ab:9e:cb:5b:4f:9b:b1:
         55:ef:f5:07:4e:fe:4d:9f:a0:0e:98:6a:ae:7a:58:1d:bc:59:
         4b:59:c4:48
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIDCwMSMA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDhi
OWExMWFlYWViYTQ4MmRiMzAwZTVjMTUwODhkYjNjNDE2MTUxODEwHhcNMjQwMTI0
MTc1NDM4WhcNMjYwMTI0MTc1NDM4WjAzMTEwLwYDVQQDEyhmODE1NjA5ZjEzMmE3
OWFhNDBmMDg5ZjQxYTM4MWEwZWRlYWM4NGJhMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2pXo3nNph7AK9sAIdGL9h0htLO1XScmu6K04bseLU+SaY8fe
t2SzA9N0Xwf4gJ+QrH2DYMHhX3busrwJzyKSsDXGuPKcRKpnzojqHoFBhNB2vgNc
hS6XfII2qo0D3MpvNBTM+1Fcc0y4VpBIYX+ZX3vXHcwiqAq7fEAE0S9EpKmr+CCa
Zdwaw30slZtz31yCLC+3eFeoR9m2J34TmJPylH2vKiLt9H+eebXDOB/NEL2cycmG
XUvhg/L98YFXNGTNcSY5A9MgawK1yzkJ6ajUchGZNNCJFP7/db/RpIGatzzQMrDS
PwCt6S0gPgMERXfq4eABeYEQ32IyWPmUHUtCjwIDAQABo4ICXDCCAlgwHQYDVR0O
BBYEFJjGO14EwlaKqfTuXdI0WhHx+9d9MB8GA1UdIwQYMBaAFNAtIlU1HxXcEnt5
i03RY339IF2DMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvOGI5YTEx
YWVhZWJhNDgyZGIzMDBlNWMxNTA4OGRiM2M0MTYxNTE4MS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvOTNiNTk4MDItNmZlMi00NzI0LThlNzMtZDk2NzNm
YjYxYmMwL2Y4MTU2MDlmMTMyYTc5YWE0MGYwODlmNDFhMzgxYTBlZGVhYzg0YmEu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy85M2I1OTgwMi02ZmUyLTQ3MjQtOGU3My1kOTY3
M2ZiNjFiYzAvOGI5YTExYWVhZWJhNDgyZGIzMDBlNWMxNTA4OGRiM2M0MTYxNTE4
MS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQR
MA8wDQQCAAIwBwMFACgDYpAwDQYJKoZIhvcNAQELBQADggEBAJCMGe+jkDcQbfBz
4iQNCCc7yrzHfhfLI7sxMQnWP21LantCZfsx6LioiDMj0d1K4OBuRfDwHGUkq4n4
dc7WkFtlcruR4PbtddtNMXObvB1BuG2BjC1zDoWT78dHCnDVCfb+JwqE8kuwvoMc
5vZsz5BqJnsaaPJAsK+kPCg3ULQvjvOSx11GyJCtaXjwDCYoUYPefYCk8nEK9iIN
366j3NnvEjfwAi/bdas1/4RQ32LihKfGiug9ZYX+x/vClccvOWs9qZ16LL1xDowk
tYS+wCc/NpZ0IYqOpd6L50wjPyvWM6jWq57LW0+bsVXv9QdO/k2foA6Yaq56WB28
WUtZxEg=
-----END CERTIFICATE-----